This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/fJWzhiz6ayYsqM8kzsREYtIJBgI.roa
File: fJWzhiz6ayYsqM8kzsREYtIJBgI.roa (raw, json)
Hash identifier: N8Chz/wqQxJEwp3lnnRBhU8gdawDyJefdia645ECTwg=
Subject key identifier: 7C:95:B3:86:2C:FA:6B:26:2C:A8:CF:24:CE:C4:44:62:D2:09:06:02
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 019B7C129DE0829BE213C61C9CB7BF3DE28F
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/fJWzhiz6ayYsqM8kzsREYtIJBgI.roa
Signing time: Fri 02 Jan 2026 00:19:13 +0000
ROA not before: Fri 02 Jan 2026 00:19:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39007
IP address blocks: 82.135.160.0/21 maxlen: 21
212.59.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:9d:e0:82:9b:e2:13:c6:1c:9c:b7:bf:3d:e2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Jan 2 00:19:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c95b3862cfa6b262ca8cf24cec44462d2090602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b5:99:68:f7:ab:e2:b9:a5:a3:78:ba:55:21:
83:41:02:2a:a2:85:8e:e5:95:8a:bc:8d:da:5b:9f:
a9:13:7d:2e:e4:e6:bc:46:d4:88:7e:67:05:5f:43:
4d:68:66:98:da:64:b2:f2:a2:19:71:1a:fc:6b:eb:
94:c0:83:d2:6c:7c:e8:9c:98:be:c8:30:13:4f:12:
d0:91:01:ab:8c:c4:d5:ac:1c:93:d4:42:58:91:d1:
e0:08:54:de:21:78:8a:01:d8:66:cb:19:af:ed:fe:
16:62:89:25:af:49:78:fe:32:9e:21:47:9a:31:f1:
c5:5c:35:37:76:15:85:00:29:57:a9:ac:bf:f6:83:
0e:52:cd:2c:c0:1f:60:52:28:a5:73:39:f1:c4:b1:
28:f4:69:3f:8e:3b:a3:b0:6b:ef:8a:86:18:c2:ab:
dc:fe:bb:2e:1f:6f:09:8b:9e:a1:3f:cc:77:9e:2c:
18:57:1e:3d:7c:34:4e:71:da:18:17:d5:f3:c0:15:
11:52:77:33:a1:c2:22:f0:d8:3b:4b:1f:e1:1e:65:
ab:27:da:11:03:ec:6f:a0:a0:49:da:36:d1:a0:dc:
92:df:c1:aa:27:ff:3c:ce:aa:fc:2f:d2:e3:3a:06:
98:85:3d:bb:e6:ae:4b:a7:ae:01:93:4b:9c:1e:12:
34:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:95:B3:86:2C:FA:6B:26:2C:A8:CF:24:CE:C4:44:62:D2:09:06:02
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/fJWzhiz6ayYsqM8kzsREYtIJBgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.135.160.0/21
212.59.18.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:6f:a2:e1:70:46:10:3e:86:3d:29:f6:4a:20:9f:cf:cf:81:
c4:da:5f:68:d1:ba:38:df:ec:41:3f:a8:76:10:c0:e5:42:04:
82:9f:c9:e7:c1:ef:9b:85:63:ca:4e:64:c4:ab:5e:cc:8a:c0:
aa:d7:7f:60:a5:6a:ab:7a:c2:27:e9:bd:bf:cf:70:e2:f3:ed:
f6:10:45:13:2f:03:5b:df:80:d6:63:b0:02:5d:69:9a:8f:8d:
db:95:bd:27:09:9f:3f:85:5a:61:fa:2f:be:8e:0b:0c:88:b7:
93:de:47:66:9d:32:9f:be:77:9a:90:2e:a4:98:58:c4:f5:c6:
62:01:fb:73:db:89:01:08:25:19:55:65:1f:c7:5d:e4:41:11:
54:73:27:29:b8:fc:09:52:a3:e9:cf:58:1f:51:ed:87:82:b4:
45:22:17:7c:cd:01:4b:e0:0e:12:63:8a:20:d3:0a:ac:6c:79:
0d:3d:65:9d:0d:00:9c:d2:1a:71:f2:6f:66:9e:ac:aa:5f:77:
8e:1c:f2:30:40:d3:58:fb:bb:7f:b2:20:08:f9:76:9a:55:b6:
84:53:81:9b:80:6d:49:c7:24:1f:6b:12:f8:7f:dc:b9:39:ce:
60:21:a1:28:f8:4f:ef:95:25:36:b3:23:8a:71:e0:82:9e:d3:
6e:6d:d1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:06:15 2026 by rpki-client